Unrated severityNVD Advisory· Published Dec 19, 2000· Updated Jun 16, 2026

CVE-2000-0884

Description

IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary commands, via malformed URLs that contain UNICODE encoded characters, aka the "Web Server Folder Traversal" vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Microsoft/Internet Information Server2 versions
cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*
Microsoft/IISllm-fuzzy
Range: 4.0, 5.0

Patches

Vulnerability mechanics

References

www.osvdb.org/436nvd
www.securityfocus.com/bid/1806nvd
docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-078nvd
exchange.xforce.ibmcloud.com/vulnerabilities/5377nvd
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A44nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.058
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000